At a glance:

Endpoint Vulnerability

IFRAME sandbox same-origin access through redirect

Description

Mozilla developer Boris Zbarsky discovered an issue where network-level redirects cause an sandbox to forget its unique origin and behave as if the allow-same-origin keyword were applied. This allows the sandboxed content to access other content from the same origin without explicit approval.